v4.9.0

What's Changed

✨ Added

• Add buildkite-agent cache restore --download-timeout to limit download time across selected caches by @buildkate in #4533

🐛 Fixed

• Embed fallback root certificates so the agent can verify TLS on hosts without system certificates by @zhming0 in #4571
• Clean up temporary downloads when buildkite-agent cache restore receives SIGINT or SIGTERM by @buildkate in #4569
• Honor Retry-After when buildkite-agent oidc request-token retries a request by @CerealBoy in #4590
• Request JSON API responses to avoid parsing HTML error pages by @moskyb in #4593
• Avoid slow checks for missing commits in partial clones when skipping fetches for existing commits or using Git mirrors by @zhming0 in #4594

🏠 Internal

• Update osc7501 to v0.3.0 under the Buildkite organization by @wolfeidau in #4566
• Dependency updates by @dependabot[bot] in #4573 and #4574
• Keep agent tracing from delaying stable release jobs by @lucaswilric in #4532

Full Changelog: v4.8.1...v4.9.0